AD CS ESC1 and ESC8: From Help Desk Scam to Domain Privileges
A help desk scam on Teams led to domain access through misconfigured AD CS. See how ESC1 and ESC8 work and how to close these certificate paths.
Social Engineering
Explore Raxis’ Social Engineering blogs for expert tips, real-world attack stories, and strategies to defend against phishing, vishing, and onsite threats.
PSE & Red Team Series: What a Project Manager Learned Inside the Building
How confidence alone gets a stranger into your building, and how that access turns into a remote network foothold. Inside a real Raxis red team engagement.
Choosing a Penetration Testing Company: Physical Pentesting
Onsite physical pentesting includes both social aspects like tailgating and technical tests such as badge cloning. Choose a company with the whole package.
PSE & Red Team Series: Looting
Nathan Anderson continues his Physical Social Engineering and Red Team series with the final step: looting. Learn what shows value to stakeholders in reports.
The Game is Starting: Release the Fraudsters
Large tournaments bring out fraudsters just as your employees’ guard is down. Raxis CTO Brian Tant discusses recent threats and how to protect your company.
Deepfakes: The Face on Your Screen Might Not Be Real
Phishing and other social engineering techniques have crossed a threshold with deepfake attacks. Scottie Cole discusses how to protect your organization.
PSE & Red Team Series: Social Engineering
Lead Penetration Tester Nathan Anderson is back with more PSE and red team tips, including tailgating, impersonating, and pretexts to gain onsite access.
CrowdStrike Fires Insider Who Shared Screens Externally
Though hacker groups claimed to have access to internal systems, CrowdStrike announced they fired an insider who shared external screens with the attackers.
PSE & Red Team Series: Badge Cloning
Lead Penetration Tester Nathan Anderson is back with more PSE and red team advice, this time looking into three tools he uses to clone badges and gain access.
SpamGPT: Protecting Your Company From Large-Scale Phishing
SpamGPT, a complex phishing and social engineering suite has made the news recently. Learn what it is and how organizations can protect their employees.
Lessons from the DaVita Healthcare Ransomware Attack
The DaVita ransomware attack is one of the most impactful recent healthcare breaches. Learn what happened and what could have been done to limit the impact.
PSE & Red Team Series: The Power of Grip to Enhance the Under-Door Tool
In this next post in our PSE and Red Team Series, Brad Herring explains how to use gaffer’s tape or heat-shrink tubing to make an under-door tool easier to use.
27 posts in Social Engineering.